CVEs published November 12, 2023
35 CVEs were published on November 12, 2023: 0 critical, 2 high. Browse them by severity, product and exploitation status.
- Published
- 35
- Critical
- 0
- High
- 2
- Medium
- 31
- Low
- 2
- Unrated
- 0
- Now in CISA KEV
- 0
- Fix available
- 2
Most affected products
- AccessPress Themes WP TFeed
- 1
- Amit Agarwal Google XML Sitemap for Images
- 1
- Apache Software Foundation Apache Airflow · apache-airflow
- 1
- Apache Software Foundation apache-airflow · apache-airflow
- 1
- audrasjb Reusable Blocks Extended
- 1
- checkpoint Harmony Endpoint.
- 1
- Evgen Yurchenko WP Translitera
- 1
- ExpressTech Quiz And Survey Master – Best Quiz, Exam and Su…
- 1
- flippercode WordPress Plugin for Google Maps – WP MAPS
- 1
- gl_SPICE New Adman
- 1
High 2
Medium, low and unrated 33
- CVE-2023-26531WordPress 多合一搜索自动推送管理插件-支持Baidu/Google/Bing/IndexNow/Yandex/头条 Plugin <= 4.2.7 is vulnerable to Cross Site Request Forgery (CSRF)闪电博 多合一搜索自动推送管理插件-支持Baidu/Google/Bing/IndexNow/Yandex/头条
- CVE-2023-26524WordPress Quiz And Survey Master Plugin <= 8.0.10 is vulnerable to Cross Site Request Forgery (CSRF)ExpressTech Quiz And Survey Master – Best Quiz, Exam and Su…
- CVE-2023-26518WordPress WP TFeed Plugin <= 1.6.9 is vulnerable to Cross Site Request Forgery (CSRF)AccessPress Themes WP TFeed
- CVE-2023-26514WordPress XML Sitemap Generator for Google Plugin <= 1.3.3 is vulnerable to Cross Site Request Forgery (CSRF)WPGrim Dynamic XML Sitemaps Generator for Google
- CVE-2023-27445WordPress Blog Floating Button Plugin <= 1.4.12 is vulnerable to Cross Site Request Forgery (CSRF)Meril Blog Floating Button
- CVE-2023-27441WordPress New Adman Plugin <= 1.6.8 is vulnerable to Cross Site Request Forgery (CSRF)gl_SPICE New Adman
- CVE-2023-27438WordPress WP Translitera Plugin <= p1.2.5 is vulnerable to Cross Site Request Forgery (CSRF)Evgen Yurchenko WP Translitera
- CVE-2023-27434WordPress Classic Editor and Classic Widgets Plugin <= 1.2.5 is vulnerable to Cross Site Request Forgery (CSRF)WPGrim Classic Editor and Classic Widgets
- CVE-2023-27436WordPress Elegant Custom Fonts Plugin <= 1.0 is vulnerable to Cross Site Request Forgery (CSRF)Louis Reingold Elegant Custom Fonts
- CVE-2023-27431WordPress Big Store Theme <= 1.9.3 is vulnerable to Cross Site Request Forgery (CSRF)ThemeHunk Big Store
- CVE-2023-27417WordPress Affiliate Super Assistent Plugin <= 1.5.1 is vulnerable to Cross Site Request Forgery (CSRF)Timo Reith Affiliate Super Assistent
- CVE-2023-27418WordPress Side Menu Lite Plugin <= 4.0 is vulnerable to Cross Site Request Forgery (CSRF)Wow-Company Side Menu Lite – add sticky fixed buttons
- CVE-2023-27632WordPress Daily Prayer Time Plugin <= 2023.03.08 is vulnerable to Cross Site Request Forgery (CSRF)mmrs151 Daily Prayer Time
- CVE-2023-27623WordPress WP Page Numbers Plugin <= 0.5 is vulnerable to Cross Site Request Forgery (CSRF)Jens Törnell WP Page Numbers
- CVE-2023-27611WordPress Reusable Blocks Extended Plugin <= 0.9 is vulnerable to Cross Site Request Forgery (CSRF)audrasjb Reusable Blocks Extended
- CVE-2023-28167WordPress CF7 Invisible reCAPTCHA Plugin <= 1.3.3 is vulnerable to Cross Site Request Forgery (CSRF)Vsourz Digital CF7 Invisible reCAPTCHA
- CVE-2023-28172WordPress WP Google Map Plugin Plugin <= 4.4.2 is vulnerable to Cross Site Request Forgery (CSRF)flippercode WordPress Plugin for Google Maps – WP MAPS
- CVE-2023-28173WordPress Google XML Sitemap for Images Plugin <= 2.1.3 is vulnerable to Cross Site Request Forgery (CSRF)Amit Agarwal Google XML Sitemap for Images
- CVE-2023-28419WordPress Force First and Last Name as Display Name Plugin <= 1.2 is vulnerable to Cross Site Request Forgery (CSRF)Stranger Studios Force First and Last Name as Display Name
- CVE-2023-28420WordPress Custom Options Plus Plugin <= 1.8.1 is vulnerable to Cross Site Request Forgery (CSRF)Leo Caseiro Custom Options Plus
- CVE-2023-28495WordPress WP Shortcode by MyThemeShop Plugin <= 1.4.16 is vulnerable to Cross Site Request Forgery (CSRF)WP Shortcode by MyThemeShop
- CVE-2023-28497WordPress Slideshow Gallery Plugin <= 1.7.6 is vulnerable to Cross Site Request Forgery (CSRF)Tribulant Slideshow Gallery LITE
- CVE-2023-28498WordPress Hotel Booking Lite Plugin <= 4.6.0 is vulnerable to Cross Site Request Forgery (CSRF)MotoPress Hotel Booking Lite
- CVE-2023-28618WordPress Enhanced Plugin Admin Plugin <= 1.16 is vulnerable to Cross Site Request Forgery (CSRF)Marios Alexandrou Enhanced Plugin Admin
- CVE-2023-28694WordPress Wbcom Designs – BuddyPress Activity Social Share Plugin <= 3.5.0 is vulnerable to Cross Site Request Forgery (CSRF)Wbcom Designs – BuddyPress Activity Social Share
Show all 33 entriesShow fewer entries
- CVE-2023-28696WordPress I Recommend This Plugin <= 3.9.0 is vulnerable to Cross Site Request Forgery (CSRF)Harish Chouhan, Themeist I Recommend This
- CVE-2023-28930WordPress Mobile Banner Plugin <= 1.5 is vulnerable to Cross Site Request Forgery (CSRF)Robin Phillips Mobile Banner
- CVE-2023-28987WordPress Wp Ultimate Review Plugin <= 2.0.3 is vulnerable to Cross Site Request Forgery (CSRF)Wpmet Wp Ultimate Review
- CVE-2023-29238WordPress Whydonate – FREE Donate button Plugin <= 3.12.15 is vulnerable to Cross Site Request Forgery (CSRF)Whydonate – FREE Donate button – Crowdfunding – Fundraising
- CVE-2023-29425WordPress ShiftController Employee Shift Scheduling Plugin <= 4.9.23 is vulnerable to Cross Site Request Forgery (CSRF)plainware.com ShiftController Employee Shift Scheduling
- CVE-2023-42781Apache Airflow: Permission verification bypass allows viewing dagruns of other dagsApache Software Foundation Apache Airflow · apache-airflow
- CVE-2023-47037Apache Airflow missing fix for CVE-2023-40611 in 2.7.1 (DAG run broken access)Apache Software Foundation apache-airflow · apache-airflow
- CVE-2023-6084Tongda OA 2017 delete.php sql injectionTongda OA